# Veracode Application Security Platform, ZAP by Checkmarx vs Coverity Comparison | | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Star Rating** | 3.8 out of 5 | 4.7 out of 5 | 4.2 out of 5 | | **Total Reviews** | 25 | 14 | 55 | | **Largest Market Segment** | Enterprise (52.2% of reviews) | Small-Business (76.9% of reviews) | Enterprise (63.6% of reviews) | | **Entry Level Price** | No pricing available | Free | No pricing available | --- ## Top Pros & Cons ### Veracode Application Security Platform Pros: - Security (2 reviews) - Vulnerability Detection (2 reviews) Cons: - Expensive (1 reviews) - Licensing Issues (1 reviews) ### ZAP by Checkmarx Pros: - Ease of Use (6 reviews) - Automation (5 reviews) Cons: - False Positives (3 reviews) - Poor Documentation (2 reviews) ### Coverity **Not enough data** --- ## Ratings Comparison | Rating | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Meets Requirements** | 8.1 (19 reviews) | 9.6 (12 reviews) | 8.9 (43 reviews) | | **Ease of Use** | 7.3 (19 reviews) | 9.0 (12 reviews) | 8.4 (43 reviews) | | **Ease of Setup** | 5.7 (7 reviews) | Not enough data | 8.2 (19 reviews) | | **Ease of Admin** | 7.4 (7 reviews) | Not enough data | 8.2 (19 reviews) | | **Quality of Support** | 8.0 (18 reviews) | 8.1 (12 reviews) | 8.6 (37 reviews) | | **Has the product been a good partner in doing business?** | 7.9 (7 reviews) | Not enough data | 8.1 (18 reviews) | | **Product Direction (% positive)** | 6.3 (19 reviews) | 10.0 (11 reviews) | 7.7 (40 reviews) | --- ## Pricing ### Veracode Application Security Platform #### Entry-Level Pricing No pricing available #### Free Trial No information available ### ZAP by Checkmarx #### Entry-Level Pricing Plan: Open source Price: Free Key Features: - Everything [Learn more about ZAP by Checkmarx](https://www.g2.com/products/zap-by-checkmarx/reviews) #### Free Trial Yes ### Coverity #### Entry-Level Pricing No pricing available #### Free Trial No information available --- ## Features Comparison By Category ### Penetration Testing | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | 8.4/10 | 13 | | **Coverity** | N/A | N/A | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **API / Integrations** | Not enough data | 8.3 (12 reviews) | Not enough data | | **Extensibility** | Not enough data | 8.8 (12 reviews) | Not enough data | | **Reporting and Analytics** | Not enough data | 8.8 (12 reviews) | Not enough data | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Issue Tracking** | Not enough data | 8.1 (12 reviews) | Not enough data | | **Reconnaissance** | Not enough data | 8.2 (12 reviews) | Not enough data | | **Vulnerability Scan** | Not enough data | 9.4 (12 reviews) | Not enough data | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Command-Line Tools** | Not enough data | 7.6 (12 reviews) | Not enough data | | **Manual Testing** | Not enough data | 7.5 (12 reviews) | Not enough data | | **Test Automation** | Not enough data | 8.6 (12 reviews) | Not enough data | | **Performance and Reliability** | Not enough data | 8.9 (12 reviews) | Not enough data | ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | 8.6/10 | 13 | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **API / Integrations** | Not enough data | Not enough data | 8.3 (11 reviews) | | **Extensibility** | Not enough data | Not enough data | 9.0 (12 reviews) | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Reporting and Analytics** | Not enough data | Not enough data | 8.9 (11 reviews) | | **Issue Tracking** | Not enough data | Not enough data | 8.8 (11 reviews) | | **Static Code Analysis** | Not enough data | Not enough data | 9.2 (11 reviews) | | **Code Analysis** | Not enough data | Not enough data | 8.9 (11 reviews) | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Command-Line Tools** | Not enough data | Not enough data | 8.5 (11 reviews) | | **Manual Testing** | Not enough data | Not enough data | 8.5 (8 reviews) | | **Test Automation** | Not enough data | Not enough data | 8.5 (10 reviews) | | **Compliance Testing** | Not enough data | Not enough data | 9.1 (11 reviews) | | **Black-Box Scanning** | Not enough data | Not enough data | 8.8 (10 reviews) | | **Detection Rate** | Not enough data | Not enough data | 8.9 (11 reviews) | | **False Positives** | Not enough data | Not enough data | 7.6 (12 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | ### Dynamic Application Security Testing (DAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | 8.5/10 | 7 | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **API / Integrations** | 7.9 (7 reviews) | Not enough data | Not enough data | | **Extensibility** | 9.2 (6 reviews) | Not enough data | Not enough data | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Reporting and Analytics** | 8.3 (7 reviews) | Not enough data | Not enough data | | **Issue Tracking** | 8.3 (5 reviews) | Not enough data | Not enough data | | **Static Code Analysis** | 9.3 (7 reviews) | Not enough data | Not enough data | | **Vulnerability Scan** | 8.8 (7 reviews) | Not enough data | Not enough data | | **Code Analysis** | 8.6 (6 reviews) | Not enough data | Not enough data | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Manual Testing** | Not enough data | Not enough data | Not enough data | | **Test Automation** | 9.0 (5 reviews) | Not enough data | Not enough data | | **Compliance Testing** | Not enough data | Not enough data | Not enough data | | **Black-Box Scanning** | 8.3 (5 reviews) | Not enough data | Not enough data | | **Detection Rate** | 8.0 (5 reviews) | Not enough data | Not enough data | | **False Positives** | 7.8 (6 reviews) | Not enough data | Not enough data | ### Vulnerability Scanner | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Performance | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Issue Tracking** | Not enough data | Not enough data | Not enough data | | **Detection Rate** | Not enough data | Not enough data | Not enough data | | **False Positives** | Not enough data | Not enough data | Not enough data | | **Automated Scans** | Not enough data | Not enough data | Not enough data | #### Network | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Compliance Testing** | Not enough data | Not enough data | Not enough data | | **Perimeter Scanning** | Not enough data | Not enough data | Not enough data | | **Configuration Monitoring** | Not enough data | Not enough data | Not enough data | #### Application | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Manual Application Testing** | Not enough data | Not enough data | Not enough data | | **Static Code Analysis** | Not enough data | Not enough data | Not enough data | | **Black Box Testing** | Not enough data | Not enough data | Not enough data | #### Agentic AI - Vulnerability Scanner | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Functionality - Software Composition Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Language Support** | Not enough data | Not enough data | Not enough data | | **Integration** | Not enough data | Not enough data | Not enough data | | **Transparency** | Not enough data | Not enough data | Not enough data | #### Effectiveness - Software Composition Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Remediation Suggestions** | Not enough data | Not enough data | Not enough data | | **Continuous Monitoring** | Not enough data | Not enough data | Not enough data | | **Thorough Detection** | Not enough data | Not enough data | Not enough data | ### Secure Code Review | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Documentation | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Feedback** | Not enough data | Not enough data | 9.3 (5 reviews) | | **Prioritization** | Not enough data | Not enough data | 9.3 (5 reviews) | | **Remediation Suggestions** | Not enough data | Not enough data | 8.7 (5 reviews) | #### Security | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **False Positives** | Not enough data | Not enough data | 7.0 (5 reviews) | | **Custom Compliance** | Not enough data | Not enough data | 8.3 (5 reviews) | | **Agility** | Not enough data | Not enough data | 8.3 (5 reviews) | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Agentic AI - Static Code Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### AI AppSec Assistants | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Performance - AI AppSec Assistants | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Remediation** | Not enough data | Not enough data | Not enough data | | **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | | **Accuracy** | Not enough data | Not enough data | Not enough data | #### Integration - AI AppSec Assistants | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Stack Integration** | Not enough data | Not enough data | Not enough data | | **Workflow Integration** | Not enough data | Not enough data | Not enough data | | **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | ### Interactive Application Security Testing (IAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Coverity** | N/A | N/A | #### Agentic AI - Interactive Application Security Testing (IAST) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | --- ## Categories **Unique to Veracode Application Security Platform (9):** [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast) **Unique to ZAP by Checkmarx (2):** [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Unique to Coverity (3):** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review) --- ## Reviewer Demographics ### By Company Size | Segment | Veracode Application Security Platform | ZAP by Checkmarx | Coverity | |---|---|---|---| | **Small-Business** | 17.4% | 76.9% | 10.9% | | **Mid-Market** | 30.4% | 7.7% | 25.5% | | **Enterprise** | 52.2% | 15.4% | 63.6% | ### By Industry #### Veracode Application Security Platform - **Information Technology and Services:** 30.4% - **Hospital & Health Care:** 13.0% - **Consumer Goods:** 8.7% - **Computer Software:** 8.7% - **Telecommunications:** 4.3% - **Retail:** 4.3% - **Research:** 4.3% - **Media Production:** 4.3% - **Logistics and Supply Chain:** 4.3% - **Insurance:** 4.3% - **Other:** 13.0% #### ZAP by Checkmarx - **Computer & Network Security:** 41.7% - **Information Technology and Services:** 25.0% - **Computer Software:** 16.7% - **Internet:** 8.3% - **Hospital & Health Care:** 8.3% #### Coverity - **Computer Software:** 36.4% - **Information Technology and Services:** 12.7% - **Telecommunications:** 9.1% - **Computer & Network Security:** 7.3% - **Automotive:** 5.5% - **Semiconductors:** 5.5% - **Airlines/Aviation:** 3.6% - **Aviation & Aerospace:** 1.8% - **Banking:** 1.8% - **Computer Hardware:** 1.8% - **Other:** 14.5% --- ## Alternatives ### Alternatives to Veracode Application Security Platform - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews) - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2348 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) - [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.1/5 stars (76 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews) - [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews) ### Alternatives to ZAP by Checkmarx - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews) - [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) — 4.1/5 stars (105 reviews) - [Intruder](https://www.g2.com/products/intruder/reviews) — 4.8/5 stars (206 reviews) - [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews) - [vPenTest](https://www.g2.com/products/vpentest/reviews) — 4.6/5 stars (231 reviews) - [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) — 4.6/5 stars (185 reviews) - [Metasploit](https://www.g2.com/products/metasploit/reviews) — 4.6/5 stars (55 reviews) - [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) — 4.5/5 stars (177 reviews) ### Alternatives to Coverity - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews) - [Klocwork](https://www.g2.com/products/klocwork/reviews) — 4.4/5 stars (23 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2348 reviews) - [OpenText Static Application Security Testing](https://www.g2.com/products/opentext-static-application-security-testing/reviews) — 4.5/5 stars (24 reviews) - [Codacy](https://www.g2.com/products/codacy/reviews) — 4.6/5 stars (29 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews) --- ## Top Discussions ### Veracode Application Security Platform No discussions available for this product. ### ZAP by Checkmarx No discussions available for this product. ### Coverity No discussions available for this product. --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/veracode-application-security-platform-vs-zap-by-checkmarx-vs-coverity)